Slashdot Mirror


User: arivanov

arivanov's activity in the archive.

Stories
0
Comments
3,701
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 3,701

  1. Re:user friendly? on FreeS/WAN Continues As Openswan · · Score: 2, Informative
    For certain values of 'nice', one of the nice things about klips was that there was a virtual interface for the decrypted traffic.

    Nice for manual kludge on a small office VPN setups - agree 100%.

    Absolutely disagree for a larger network with dynamic routing. For any network with these it was THE NIGHTMARE DESIGN (TM). Reason is that nearly any routing protocol carries either IP or IP/NETMASK information and no interface information (neither name, nor ifIndex). It is obvious that in the presence of two interfaces with exactly the same netmasks and ip addresses the information content of a routing protocol becomes highly ambigous. This is something BSDs have got right - they define a separate address family for IPSEC and handle it completely separately. As a result you can happily use them both.

  2. Re:Debian packages now avalible for freeswan on FreeS/WAN Continues As Openswan · · Score: 3, Informative

    As someone who have had to deal with this minor horror (on debian actually) I would not call that works. Works from time to time and very sporadically usually in tunnel mode. There was only one release which had transport mode working correctly and ineroperating versus both BSD and Windoze. All other either failed completely or did not rekey correctly.

  3. Re:no but maybe the better one... on FreeS/WAN Continues As Openswan · · Score: 4, Informative
    That means you cannot packet filter on anything other than IP & MAC Address as you can't read anything else, its all encrypted

    Used to be correct as of ipfw 1. No longer the case as of ipfw2, though some cases do not work fully yet. See the ipsec qualifier for rules.

    Dunno about Linux though. I use KAME extensively only on BSD.

  4. Re:user friendly? on FreeS/WAN Continues As Openswan · · Score: 4, Insightful

    Ahem.

    The most horrible IPSEC out there. Broken by design, absolutely incompatible with any routing protocol software, broken in operation and utter nightmare to configure and get working.

    One of the things I apploaded most when reading the 2.6 kernel changelogs was the port of KAME IPSEC and utilities. They work (TM). They are missing some features that were in FreeSwan that made it useable as a amateur VPN access point (email ID in shared keys, x509 CRL and a few others), but I do not see these as a reason to revive freeswan instead of fixing the omissions.

  5. Re:Yay! on Microsoft To Be Fined E500M By European Union? · · Score: 2, Informative

    It is not court. It is an administrative penalty.

    Actually some background:

    There was a string of high profile EU comission decisions to be overturned or stayed by the court.

    As a result this time the comission is doing it by the book. This is the reason why it is asking that all competition authorities in all states agree unanimously on the penalties and the penalties are OK not just per EU statutes, but per the statutes of the individual states.

    So, to summarize, they are making an example out of MSFT. They want to show that they can take a big fish and it will not be able to wiggle out so that the small fish do not rely on the courts next time.

  6. Re:What other Gates buildings are there? on RMS to Move Into Bill Gates Building Today · · Score: 1

    Nope, of Chaos. WTF else do you expect from someone who is supposedly a closed relative to someone called Dworkin...

  7. Re:What happened to the Buran? on Energiya Pushes For A 6-Person Space Capsule · · Score: 1

    Read the Spiral home page, it is written there black on white if you can read russian.

    Basically as per the page MPO Molnia wanted to base the russian shuttle on the Spiral project and all the development of the Spiral project was towards a shuttle as a goal. Someone above decided otherwise.

    This is not a literal translation, but it is close enough. Methinks if you know what are you talking about you should be able to translate it yourself.

  8. Re:What happened to the Buran? on Energiya Pushes For A 6-Person Space Capsule · · Score: 1

    I am not accusing anyone.

    I do not think that anyone can get all the bloody OKB politiks figured out now, 10+ years after. I think, and I am not alone in this one that BOR-4 and other similar craft where what Buran was supposed to be (this is also a feasible explanation why it took so long to launch Buran, while prototypes of spaceplanes have been launched 10+ years prior to that).

    End of the day it did not come to be because some idiot above insisted on "the shuttle spec or better". Let's face it, shuttle spec is wrong. It is a compromise of NASA goals and Airforce goals which in fact fails to achieve either. It is the most stupid thing to copy from a technical perspective (and the first from political).

  9. Re:Hmm.... on Online Publisher Blocks LinuxToday Referrals · · Score: 1

    Dunno about patentable, but it is be a serious pain in the a*** to implement. You need a different architecture for you entire web site. You need a light, cache and dynamic version for the entire content. Some places (news.BBC.co.uk) do it, but they switch between the different alternatives only under grave circumstances like 9/11. If you think slashdotting is something, you should think about after 9/11. Getting this "multiple detail level" done is the hard part (yeah, anyone trying to say that it is easy please specify a content management system that does that). Once you have done it the rest is easy.

  10. Re:What happened to the Buran? on Energiya Pushes For A 6-Person Space Capsule · · Score: 3, Informative
    You obviously do not know Buran history.

    I have posted this before and will post it again. Buran program started at about the same time as the Shuttle, but was initially aiming for a smaller vehicle which could land nearly anywhere, not a specially prepared strategic bomber airstrip with 30 km to spare. There are pictures of a Russian Kiev class carrier group recovering one of the prototypes taken by a New Zeland destroyer as early as later 70'es in the pacific. In btw, it looks exactly as one of the competitors for the current NASA vehicle. IMO Energia should sue for plagiarism. Unless whoever was the proposer actually used their blueprints (which is quite likely, happens quite often lately, especially when congresscritters are not watching).

    Unfortunately, at one point some idiot above issued an order for Buran to comply with the same spec as the shuttle while retaining automatic landing. This was the most stupid decision ever, because the shuttle spec is a result of political horse trading. Its capacity was increased at the last moment at the expense of other flight parameteres to get Pentagon funding. This resultted in it being pushed way beyond the limits of our engineering at the time (and possibly now).

    This resulted in:

    Instead of a small launcher Soyuz or Proton Class stage 1+2, Buran had to use Energia which meant a dependency on a launcher program which was in its very early stages at the time.

    It stopped being economically feasible. Let's face it, the shuttle is not. It is the most expensive (in terms of dollar per killogram) launcher.

    As a result after one successful fully automated test flight, and one take off incident it was mothballed. Someone finally did the books and the numbers did not come out.

    If you do not believe me check how many Burans are actually floating around (one was even on sale lately). Basically Russia still has definitely more then 2. It does not fly them because it does not make any sense (financially) and because launching them requires building Energia launchers which for all practical purposes are too far from being sufficiently reliable for human launches. They simply have not been tested enough.

  11. Re:You should be more scared... on U.S. Prepares to Get Nuked · · Score: 1
    despite the improbability

    You probably slept through the one year or so when Andropov ruled the Soviet Union. Think of the Cuba crisis, just one year long.

  12. Re:Lieberman on New RFC Considers .sex TLD Dangerous · · Score: 1

    This in fact is a story about UK government IT ineptitude and incompetence. The filter installed was the mail variety of the most stupid web AV/control software ever written - websweeper and they did not even test it before unleashing censorship on the entire country (after all that is what censoring the Parliament mail is all about).

    I had the same software installed for about a month (at about the same time) to scan WWW downloads for viruses. I guess I overstated the threat at the time, because it took the k1dd10tz 2+ years to get to the idea of the virus running a webserver and downloading itself from it.

    Anyway, back to the mime/websweeper. The thing forbid google at least once a day (that is with all the porn features turned off, AV only). Same with BBC, CNN, etc. So end of the second month I had enough and threw it out and blacklisted the company (the support was as abissmal as the software).

  13. Re:What about visuals? on FCC to Regulate 'Profane' Speech · · Score: 1

    You call that Porn? One flashing tit...

    Dude, you definitely have not seen the British TV awards from a year (or two ago). There you had two watermelons falling out of a dress. The funniest bit was that it was one of those ultraconservative ban everything morning TV hosts. The entire nation laughed their a*** off...

  14. Re:may I be the first to say on FCC to Regulate 'Profane' Speech · · Score: 2, Interesting
    Why must I be forced to listen to religious nuts prattle on about God?

    If you do not live in Saudi Arabia, Britanistan, US or any of the like - you do not.

    Saudi is selfexplanatory. So are its lookalikes

    Britain - oh well, what do you expect from a deranged droid which prays together with another deranged droid before delcaring wars on other countries or on scientific education in his own country by restoring creationism.

    US... Hmm... Open methinks the Novermber Issue of 1989 (+/- a few months, too long ago do not remember now) American Atheist and read the interview with George Bush (senior, president at the time). More specifically the section where he says: I trully believe that an atheist cannot be a cittizen of the United States of America .

  15. Re:Testing procedures? on More E-voting Problems in California · · Score: 4, Informative

    Ahem. This has been the case since the first such tests came out in the late 80-es. Nothing has changed ever since. This is also the reason why we used to be issued pencils along with the test papers for some classes in college 15 years ago. Actually the type of pensil also matters. It should be 2B. F and H can be misread as well.

  16. There is nothing about invasion here on Time Warner To Comply With Wiretap Law · · Score: 4, Interesting

    Move along people.

    It was possible to wiretap anything 10 years ago. At about that time Cisco started shipping some cards that were too fast for capturing traffic on them in real time.

    In 3-4 more years they deployed CEF which made NATing traffic to a remote server for collection not work either. Search the net for people swearing about D.O.S.track not working anymore.

    The only reason for doing so was profit and that their gear did not have enough CPU. There was nothing about any bloody privacy.

    As for one thing I will be very happy if the routers will be forced to have a working debug mode by law.

  17. Hate to be a Cassandra on Sci Fi Channel Plans 'Earthsea' Miniseries · · Score: 4, Insightful

    Time to put the asbestous suit.

    Hate to say it. It is likely to be a flop. Compared to Earthsea the Lord of the Rings is simple. I(very biased)MO this is the second most impossible movie after the Lord of Light. The reason is that you have both an extremely complex, logical and well described world along with a complex story line and complex characters.

    I love the rings, but the rings characters are like cartoons compared to the Earthsea (or nearly any Ursula Le Guin book).

  18. Re:Great but... on HP Shipping Turbolinux HP in Asia · · Score: 1
    most of their printer. It is quite interesting for you to say this about the inventors of the horrible abomination known as Windows only GDI printer.

    IMO, the only reason they support PCL and PS on their large kit is that there is too much software doing PCL and PS out there which does not go through any OS drivers. All CAD and printing systems come to mind. They do not want to lose this market so they are still shipping PCL and PS on their high end kit.

  19. Re:Or is it the other way around? on How Not To Sell Linux Products · · Score: 1
    because no apps have ever sold well for linux, as it holds a tiny share of the desktop...

    That is not the reason why most apps do not sell well on linux. The reason is that 95% of the companies out there try to rebadge their existing stuff and do not bother to comply with Linux filesystem hierarchy and system administration standards. As a result their packages end up fubaring the system or seriously irritating the user so that there are no repeat sales ever. For example I would have happily payed for ymessenger and used it, if it did comply with the FSH. As a result I tolerate it only when I have no other choice (when gaim has gone south again). And I am definitely not installing any more software by Yahoo.

    One of the major points of the current economical model for software (and anything else) is the repeat purchase model. Very few things have profit margin out of the first sale. It takes the customer to come back for the next product for the vendor to turn profit. If the first product from a vendor completely fubars a system (and this is much more obvious under linux then under windows) there will be no repeat sales.

    One of the reasons why IBM is succeeding in the Linux market is the fact that they have sat down and wrote proper .spec files and done proper RPMs.

    Some of them have horrible dependency lists and end up requiring ksh, but they are still native OS packages, not installanywhere or selfinstall executable abominations from the 9th circle of software hell.

  20. Too late to castrate him on Junkie Loves His Spam · · Score: 1

    He is already a grandfather. Bummer...

  21. Re:Great but... on HP Shipping Turbolinux HP in Asia · · Score: 4, Interesting

    The contribution of Compaq has been always considerable. For example Compaq RAID adapters remain one of the very few to be properly integrated in the Linux block device layer and not go through a lame SCSI emulation. They have also been reasonably consistent in terms of shipping documentation and linux friendly hardware. HP has always been the complete opposite. The fact that HP was one of the last platforms to have a linux port while Alpha was the first after x86 is selfexplanatory. So frankly dunno... Time will tell...

  22. Re:Very cool, but.. on Toyota's Trumpet Playing Robot Showcased · · Score: 2, Informative

    Well, you are right to be pissed off but for the wrong reason:

    This marketoid shit has nothing to do with Toyota R&D because in fact Toyota R&D is done by companies in Toyota group which operate under a different brand name.

    Example: Toyota engine research is done largely by Daihatsu. As a result for the 1.3 VVTi engine. Toyota: 170+g CO2/mile, Diahatsu (60% owned by Toyota and in fact manufacturing all the engines): 135-g CO2/mile, Toyota: 87 bhp, Diahatsu: 106 bhp.

    Another example - hybrid vehicles. Compare Toyota Prius with the recent Daihatsu prototypes shown at Tokio motor show. The difference is not just striking. It is mindblowing. On one side you have a piece of shit that delivers worse pollution params then a big standard petrol car from the same group (compare Prius and Sirion SL or R series), and on the other side you have something that blows your brains out in terms of fuel efficiency (around 100 mpg).

    Basically, if you think that american companies have succumbed to the powers of marketing instead of doing engineering you have no idea of what Toyota is inside. After all it is the same group that sells one car as Lexus in US, Toyota in some other countries and Daihatsu in Japan. I would not say which model - do some web searching to find out :-)

  23. Re:What about C++? on C Alive and Well Thanks to Portable.NET · · Score: 2, Interesting
    And for the anti-FORTRAN fraction. It is still the fastest thing out there!!!

    No it is not. Been there. Done it. For ultra fast solving of linear equation systems actually. A good hand coded vector library written in ASM will beat it outright. Been there done it. 12 years ago. Wrote vector libraries for TP which used routines specific to each of the CPUs at the time 286/287 (standard, AMD and Harris), 386/387, 386/IIT and forgot what else (it was just before 486 came out). Took 4 weeks of work to write and optimize instruction ordering to keep the puny 15 byte 286 pipeline always full. The result was 4-5 times faster then fortran for the same platform. And 100 times more usefull because you could use them in a proper high level language with OO.

  24. Re:Prior Art: I know, RTFA (Impracticality?) on Pop Up Ads in Space · · Score: 1

    In order for it to be visible it will have to exceed the size of most solar sail projects by an order of magnitude. At that size the thrust will become considerable (besides being consistent).

  25. Re:Yes Yes! on Comcast Cuts Infected PCs' Network Connections · · Score: 1

    Nope you got it wrong.

    Wrong part of the law.

    Gun has legitimate use. As such it may be a subject to various protection provisions. SPAMBOTS have not legitimate use whatsofucking ever.

    Also you are mistaking the protection offered to the manufacturer of the gun with the protection offered to the owner. Continuing the gun analogy: if you offer your gun freely for people to come borrow it and kill with it as long as they give the gun back to you, you are likely to spend 7+ years as an accomplice to murder under any legal system anywhere in the world.

    So any gun analogies are wrong, fallacious and people who deliberately run SPAMBOTS (note the deliberately) should be held responsible for what these SPAMbots are used for. No point to invent new laws for that. The current laws are good enough. They will deliver anything between 7 and 15 years in jail if used properly.